I'm not sure what to enter for the properties ntlm-account and ntlm-password in the filter configuration. Is that some technical account I need to add to the domain controller? I don't think it's the actual user name and passwd I want to authenticate, right?
Best regards,
Johannes
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi Johannes,
I think the documentation somewhere clearly states what you need: A computer account. That is like a technical user, but NOT just a user; a computer. For NTLMv2, it MUST be a computer account. Which always carries a "$" at the end of the username, if I remember correctly. Again, that should be mentioned somewhere in the documentation or the Wiki page.
There is a special script in the downloads somewhere which allows to create such a computer user account on the domain controller. At the time when I created this project, it apparently was not possible to do this manuall in a GUI somewhere. Maybe it is today, but to be honest, I have no clue when it comes to Microsoft products and Domain Controllers.
Anyway, that computer account user and password are required for the connection between the ntlmv2auth servlet filter and the domain controller. As you correctly mentioned, it has nothing to do with the end-user who is then being authenticated when he / she accesses the web application.
Cheers,Marcel
From:JohannesFelten<johannesfelten@users.sf.net>
To: [ntlmv2auth:discussion]general@discussion.ntlmv2auth.p.re.sf.net
Sent: Wednesday, March 2, 2016 12:15 PM
Subject: [ntlmv2auth:discussion] No sure what to configure for ntlm-account and ntlm-password
Hi all,I'm not sure what to enter for the properties ntlm-account and ntlm-password in the filter configuration. Is that some technical account I need to add to the domain controller? I don't think it's the actual user name and passwd I want to authenticate, right?Best regards,
JohannesNo sure what to configure for ntlm-account and ntlm-passwordSent from sourceforge.net because you indicated interest in https://sourceforge.net/p/ntlmv2auth/discussion/general/To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
Hi all,
I'm not sure what to enter for the properties ntlm-account and ntlm-password in the filter configuration. Is that some technical account I need to add to the domain controller? I don't think it's the actual user name and passwd I want to authenticate, right?
Best regards,
Johannes
Hi Johannes,
I think the documentation somewhere clearly states what you need: A computer account. That is like a technical user, but NOT just a user; a computer. For NTLMv2, it MUST be a computer account. Which always carries a "$" at the end of the username, if I remember correctly. Again, that should be mentioned somewhere in the documentation or the Wiki page.
There is a special script in the downloads somewhere which allows to create such a computer user account on the domain controller. At the time when I created this project, it apparently was not possible to do this manuall in a GUI somewhere. Maybe it is today, but to be honest, I have no clue when it comes to Microsoft products and Domain Controllers.
Anyway, that computer account user and password are required for the connection between the ntlmv2auth servlet filter and the domain controller. As you correctly mentioned, it has nothing to do with the end-user who is then being authenticated when he / she accesses the web application.
Cheers,Marcel
To: [ntlmv2auth:discussion] general@discussion.ntlmv2auth.p.re.sf.net
Sent: Wednesday, March 2, 2016 12:15 PM
Subject: [ntlmv2auth:discussion] No sure what to configure for ntlm-account and ntlm-password
Hi all,I'm not sure what to enter for the properties ntlm-account and ntlm-password in the filter configuration. Is that some technical account I need to add to the domain controller? I don't think it's the actual user name and passwd I want to authenticate, right?Best regards,
JohannesNo sure what to configure for ntlm-account and ntlm-passwordSent from sourceforge.net because you indicated interest in https://sourceforge.net/p/ntlmv2auth/discussion/general/To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/